Vendorsmunywekiinsurance_management_system1.0
Vulnerabilities

munyweki Insurance Management System 1.0

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

7CVEs
CVE-2024-7080
SourceCodester Insurance Management System direct request
Published 2024-07-24 · Analyzed
7.5EPSS 0.010
CVE-2024-8414
SourceCodester Insurance Management System cross-site request forgery
Published 2024-09-04 · Analyzed
6.9EPSS 0.003
CVE-2024-31648
Cross Site Scripting (XSS) in Insurance Management System v1.0, allows remote attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Category Name parameter at /core/new_category2.
Published 2024-04-15 · Analyzed
6.1EPSS 0.005
CVE-2024-25854
Cross Site Scripting (XSS) vulnerability in Sourcecodester Insurance Management System 1.0 allows attackers to run arbitrary code via the Subject and Description fields when submitting a support ticket.
Published 2024-03-11 · Analyzed
6.1EPSS 0.003
CVE-2024-7225
SourceCodester Insurance Management System Edit Insurance Policy Page update_policy cross site scripting
Published 2024-07-30 · Modified
5.4EPSS 0.005
CVE-2024-2150
SourceCodester Insurance Management System file inclusion
Published 2024-03-03 · Analyzed
5.3EPSS 0.006
CVE-2024-7068
SourceCodester Insurance Management System update_sub_category cross site scripting
Published 2024-07-24 · Analyzed
5.3EPSS 0.004